PT-2014-4841

CVE-2014-2637

·

Published

2014-10-10

·

Updated

2019-10-09

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions HP Sprinter version 12.01
Description The issue allows remote attackers to execute arbitrary code. It is related to a memory corruption remote code execution vulnerability in the TTF16.ocx component, specifically affecting the CopyRange and CopyRangeEx functions.
Recommendations For HP Sprinter version 12.01, consider disabling the TTF16.ocx component or restricting its use to minimize the risk of exploitation until a patch is available.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2014-2637
ZDI-14-360
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com